Quarterly report pursuant to Section 13 or 15(d)

Cybersecurity Incident

v3.22.1
Cybersecurity Incident
6 Months Ended
Mar. 31, 2022
Cybersecurity Incident [Abstract]  
Cybersecurity Incident

3. Cybersecurity Incident

 

On April 12, 2021, we detected a data incident in which attackers acquired data and disabled some of the technology systems used by one of our subsidiaries. Upon learning of the incident, we immediately engaged external counsel and retained a team of third-party forensic, incident response, and security professionals to investigate and determine the full scope of this incident. We also notified law enforcement officials and confirmed that the incident is covered by our insurance. We completed the investigation of the data incident with assistance from our outside professionals, and indications were that the unauthorized third-party gained access to certain personal information relating to employees and their beneficiaries for some of our operations. There was no indication of any misuse of this information.

 

Despite this disruption, production continued in our facilities. Our previously disabled subsidiary network is now back up and running securely. Working alongside our security professionals, we were able to bring our subsidiary’s systems online with enhanced security controls. We have deployed an advanced next generation anti-virus and endpoint detection and response tool, as well as Managed Detection & Response services. We remain committed to protecting the security of the personal information entrusted to us and providing high-quality products and service to our customers.

 

We recorded approximately $1.1 million of expense related to this incident, which was included in selling, general and administrative expenses, during the third quarter of 2021. The expense was primarily related to third-party service providers, including security professionals as well as legal and response teams. We may make additional investments in the future to further strengthen our cybersecurity. We filed an insurance claim during the fourth quarter of 2021 related to the incident. As of March 31, 2022, we have signed a final settlement agreement with our insurer resulting in total reimbursement of approximately $0.6 million, which included $0.4 million received during the quarter ended December 31, 2021 and $0.2 million received during the quarter ended March 31, 2022. No portion of the reimbursement remains outstanding as of March 31, 2022.